xlsx
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript executes system-level commands to perform headless formula recalculation in Excel files. - It uses
subprocess.runto callsoffice(LibreOffice) with specific arguments to trigger a recalculation macro. - It optionally utilizes the
timeoutorgtimeoututilities to manage execution duration. - [DYNAMIC_EXECUTION]: The script
recalc.pydynamically generates a LibreOffice Basic macro (Module1.xba) at runtime. - The macro is written to the user's local LibreOffice configuration directory and contains code to calculate all formulas, save, and close the workbook.
- This generated code is subsequently executed via a command-line call to the office suite.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external spreadsheet files (.xlsx, .csv, etc.), creating a potential surface for indirect prompt injection.
- Ingestion points: The agent reads files using
pandas.read_excel(as instructed inSKILL.md) and therecalc.pyscript loads workbooks viaopenpyxl.load_workbookto scan cell values. - Boundary markers: The instructions do not specify any delimiters or safety warnings for handling untrusted content within spreadsheets.
- Capability inventory: The skill has the ability to write files and execute system commands (
soffice,timeout) through therecalc.pyutility. - Sanitization: There is no evidence of sanitization or filtering of Excel cell content before it is processed by the agent or script.
- [PERSISTENCE]: The
recalc.pyscript modifies the local environment by persisting a macro in the LibreOffice application configuration directory (~/.config/libreoffice/or~/Library/Application Support/LibreOffice/). While this is a functional requirement for the skill, the macro remains in the user's application configuration across different sessions.
Audit Metadata